This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/oixSeMS7sCbhL_12C-rFn8FV_CU.mft File: oixSeMS7sCbhL_12C-rFn8FV_CU.mft (raw, json) Hash identifier: 6Xnh8ecYNtH3xoI3G9w3JXGRbzzzCzLWTLb9Y+2TAls= Subject key identifier: 19:2B:36:BE:BC:05:35:BF:5F:DC:68:68:34:EE:20:32:70:11:69:D6 Authority key identifier: A2:2C:52:78:C4:BB:B0:26:E1:2F:FD:76:0B:EA:C5:9F:C1:55:FC:25 Certificate issuer: /CN=a22c5278c4bbb026e12ffd760beac59fc155fc25 Certificate serial: 019B217559160C72E9985A33E5231F2E1576 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oixSeMS7sCbhL_12C-rFn8FV_CU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/oixSeMS7sCbhL_12C-rFn8FV_CU.mft Manifest number: 0BE6 Signing time: Mon 15 Dec 2025 10:01:37 +0000 Manifest this update: Mon 15 Dec 2025 10:01:37 +0000 Manifest next update: Tue 16 Dec 2025 10:01:37 +0000 Files and hashes: 1: P8h8nlnz4dD4fkTghoS9unFyKig.roa (hash: MYpmJNo5HIfucuzKcNdlv0aQadbbtMqL8vbh/XHclWY=) 2: oixSeMS7sCbhL_12C-rFn8FV_CU.crl (hash: fDVsyWlEkeJ5J89YbXz3MULC2BnE/QxxEH/Sp8ulhLY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/oixSeMS7sCbhL_12C-rFn8FV_CU.crl rsync://rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/oixSeMS7sCbhL_12C-rFn8FV_CU.mft rsync://rpki.ripe.net/repository/DEFAULT/oixSeMS7sCbhL_12C-rFn8FV_CU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:59:16:0c:72:e9:98:5a:33:e5:23:1f:2e:15:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a22c5278c4bbb026e12ffd760beac59fc155fc25 Validity Not Before: Dec 15 10:01:37 2025 GMT Not After : Dec 16 10:01:37 2025 GMT Subject: CN=192b36bebc0535bf5fdc686834ee2032701169d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:48:1b:6d:fd:73:fe:61:23:29:ea:27:f3:b6: 1c:0f:e1:87:d4:bb:f1:89:6f:f9:99:b3:74:f2:fd: d8:ed:28:d5:f0:cb:c4:6e:e9:56:c8:33:04:b0:ce: 1a:57:88:31:08:16:0a:4d:21:62:13:c0:a6:2d:96: 6c:f8:b8:23:b7:a6:37:00:c4:70:9c:b6:fd:44:09: 75:12:7c:e7:ee:a0:d5:a5:bc:d0:fd:6c:07:9b:69: 8a:f1:02:7a:e8:8c:b6:7d:fd:d9:1e:8d:00:e0:57: 57:0e:7d:ed:19:3b:60:16:f4:07:c3:d3:2f:6c:d7: 09:a5:50:90:a0:60:52:0d:ef:0f:fe:dc:bd:a6:72: 3e:17:34:67:91:5f:00:39:a0:4e:1c:d0:53:79:01: 85:2d:23:54:7b:a3:e1:38:a7:fd:ad:45:38:c3:86: bb:68:37:d0:74:e3:1d:c9:ea:db:7b:72:8a:42:20: 07:85:8c:4c:ea:67:56:ea:56:1e:10:e5:86:5d:a7: 23:3c:b9:9e:83:dd:a6:1d:e4:3e:70:74:57:dc:1a: 7e:e5:c9:7e:fa:70:67:1e:b3:a1:7f:57:f4:03:51: 5d:f9:94:2c:cd:2e:10:0f:9c:35:a5:9f:83:df:33: 79:02:43:4c:7d:66:0c:87:1f:c7:58:e3:45:93:5d: a7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:2B:36:BE:BC:05:35:BF:5F:DC:68:68:34:EE:20:32:70:11:69:D6 X509v3 Authority Key Identifier: keyid:A2:2C:52:78:C4:BB:B0:26:E1:2F:FD:76:0B:EA:C5:9F:C1:55:FC:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oixSeMS7sCbhL_12C-rFn8FV_CU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/oixSeMS7sCbhL_12C-rFn8FV_CU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/oixSeMS7sCbhL_12C-rFn8FV_CU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:74:e3:8a:44:a9:aa:f9:b6:80:0a:03:0d:f5:b0:8f:f8:5d: 6e:b2:31:bd:f2:86:ac:06:7c:6e:88:02:a5:13:40:49:62:c8: 16:6a:ab:2f:c2:f9:04:80:4b:49:37:5e:3b:34:0f:bf:4b:87: 12:4f:63:83:17:0e:c5:74:9e:9c:ca:f4:e6:3f:53:20:c9:f5: 80:f7:da:63:21:ca:cf:1c:de:c8:b6:d5:48:cf:63:59:c8:a3: 0b:f9:de:92:42:10:ed:19:36:11:9a:f6:dd:d0:ec:86:ed:68: ea:68:df:a4:65:bc:07:a3:01:a4:75:e6:2f:e6:56:82:6f:25: ee:43:86:81:c5:0e:9d:ff:6d:c7:12:90:17:50:5c:5f:32:58: 1e:cc:1f:55:c3:e4:e7:65:0f:c5:93:cc:d5:41:33:83:05:15: 8e:e3:ca:24:ee:8f:80:4c:fe:b3:98:f8:13:06:4b:34:11:04: c2:b9:50:94:e4:4a:9c:52:13:48:f5:d8:18:02:9f:47:19:3a: 0d:f4:74:b9:6e:47:7a:e7:60:97:a4:9e:14:7d:71:67:ae:e5: de:6f:15:2b:51:14:79:7c:e7:41:7f:72:ff:8b:a5:91:0e:09: 00:8a:29:d6:1f:ef:f0:ab:a9:c3:fa:91:c9:9b:be:6d:42:cb: d2:c8:fe:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdVkWDHLpmFoz5SMfLhV2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMmM1Mjc4YzRiYmIwMjZlMTJmZmQ3NjBiZWFjNTlmYzE1 NWZjMjUwHhcNMjUxMjE1MTAwMTM3WhcNMjUxMjE2MTAwMTM3WjAzMTEwLwYDVQQD EygxOTJiMzZiZWJjMDUzNWJmNWZkYzY4NjgzNGVlMjAzMjcwMTE2OWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0gbbf1z/mEjKeon87YcD+GH1Lvx iW/5mbN08v3Y7SjV8MvEbulWyDMEsM4aV4gxCBYKTSFiE8CmLZZs+Lgjt6Y3AMRw nLb9RAl1Enzn7qDVpbzQ/WwHm2mK8QJ66Iy2ff3ZHo0A4FdXDn3tGTtgFvQHw9Mv bNcJpVCQoGBSDe8P/ty9pnI+FzRnkV8AOaBOHNBTeQGFLSNUe6PhOKf9rUU4w4a7 aDfQdOMdyerbe3KKQiAHhYxM6mdW6lYeEOWGXacjPLmeg92mHeQ+cHRX3Bp+5cl+ +nBnHrOhf1f0A1Fd+ZQszS4QD5w1pZ+D3zN5AkNMfWYMhx/HWONFk12nvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBkrNr68BTW/X9xoaDTuIDJwEWnWMB8GA1UdIwQY MBaAFKIsUnjEu7Am4S/9dgvqxZ/BVfwlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2l4U2VNUzdzQ2JoTF8xMkMtckZuOEZWX0NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9hZmNiYWQtYzEyNi00ZjhlLWJkMjIt NDkyYjYwMzQzYTcwLzEvb2l4U2VNUzdzQ2JoTF8xMkMtckZuOEZWX0NVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9hZmNiYWQtYzEyNi00ZjhlLWJkMjItNDkyYjYwMzQzYTcw LzEvb2l4U2VNUzdzQ2JoTF8xMkMtckZuOEZWX0NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWXTjikSp qvm2gAoDDfWwj/hdbrIxvfKGrAZ8bogCpRNASWLIFmqrL8L5BIBLSTdeOzQPv0uH Ek9jgxcOxXSenMr05j9TIMn1gPfaYyHKzxzeyLbVSM9jWcijC/nekkIQ7Rk2EZr2 3dDshu1o6mjfpGW8B6MBpHXmL+ZWgm8l7kOGgcUOnf9txxKQF1BcXzJYHswfVcPk 52UPxZPM1UEzgwUVjuPKJO6PgEz+s5j4EwZLNBEEwrlQlORKnFITSPXYGAKfRxk6 DfR0uW5Heudgl6SeFH1xZ67l3m8VK1EUeXznQX9y/4ulkQ4JAIop1h/v8Kupw/qR yZu+bULL0sj+LQ== -----END CERTIFICATE-----Generated at Mon Dec 15 14:42:48 2025 by rpki-client